Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/73964352968211EBA3A89958C4F9AE02.roa
File: 73964352968211EBA3A89958C4F9AE02.roa (raw, json)
Hash identifier: yyRCxf1lUl9k5/9tACZ4k7Xaws4eKKhi4k8fLsbM9uE=
Subject key identifier: 29:70:E6:9F:AE:4B:CF:90:32:43:ED:0A:F9:D6:80:49:17:78:9E:38
Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial: 0192
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/73964352968211EBA3A89958C4F9AE02.roa
Signing time: Mon 25 Oct 2021 14:50:13 +0000
ROA not before: Mon 25 Oct 2021 14:50:13 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 136933
IP address blocks: 103.143.12.0/24 maxlen: 24
103.143.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Validity
Not Before: Oct 25 14:50:13 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6176c424-078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:39:bd:1d:ba:ad:8e:28:c0:1d:5b:89:03:
55:01:15:98:ab:65:52:17:c9:5a:d5:da:ad:ab:ff:
a7:5c:76:6b:cd:18:69:6d:88:65:3c:b0:dc:fe:42:
a8:c4:89:8e:0a:de:99:6e:d6:a4:b0:db:ae:51:73:
0a:f3:b7:a2:dc:65:7b:3c:94:5e:7f:cd:09:d0:46:
0c:f6:8b:ab:67:c8:bd:a3:67:4a:8c:a2:42:5f:ec:
94:55:0a:e6:6b:fc:45:4c:a1:32:ca:78:e0:4e:5c:
85:52:58:8f:c5:ef:8b:c5:65:27:d9:ae:38:72:7e:
35:7c:59:80:38:f8:84:b1:fb:e1:ab:9a:cd:c3:ef:
a1:a1:88:50:82:97:fa:1e:d3:b0:59:fa:9e:fe:44:
fb:d6:38:b6:7b:25:85:f3:36:0a:1e:64:f6:66:69:
61:f1:2c:d0:61:53:69:02:3e:5f:40:f0:fe:67:70:
6d:bd:59:32:9b:29:29:78:39:f7:90:c7:65:8f:43:
d8:29:d0:b6:c6:cb:5f:2c:5b:0d:dc:e3:71:84:3d:
25:76:96:42:67:9d:98:90:74:0c:90:96:7f:f7:0b:
89:c0:b2:65:7f:fa:8b:0d:bc:8a:60:cb:b3:2c:5e:
d5:2c:45:0a:93:dc:c5:ec:67:89:1c:98:fa:ed:a9:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:E6:9F:AE:4B:CF:90:32:43:ED:0A:F9:D6:80:49:17:78:9E:38
X509v3 Authority Key Identifier:
keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/73964352968211EBA3A89958C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.12.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ce:d0:ef:0f:70:70:41:82:76:2b:20:fa:c9:dd:00:34:34:
7d:da:5d:7c:53:d2:d1:54:56:d3:df:ec:08:e9:1a:4c:71:19:
c5:c5:33:8f:71:e0:d9:9b:98:e0:e1:d6:62:25:11:e5:e0:d8:
31:e8:c2:a4:3d:9a:a4:16:4c:b8:8e:e9:6a:d1:6b:13:35:22:
6e:24:43:be:58:fa:04:c6:5d:ad:d4:10:8a:29:27:2a:f6:3e:
31:d8:a9:85:0e:c5:11:92:12:8d:a1:b2:34:e6:d1:4b:09:02:
55:a3:95:4e:d7:54:3a:e5:51:2c:06:72:5a:ca:a1:32:1b:b5:
d3:a0:c4:01:f9:c9:35:23:20:69:56:35:85:24:59:a9:f9:22:
41:de:40:77:7a:bf:25:ed:40:70:49:47:9e:02:7f:cc:30:79:
33:e5:34:62:20:47:41:23:4f:4b:e1:23:b5:a8:55:ff:78:f1:
08:d2:cc:de:b9:dd:d5:88:87:ba:ad:d0:c6:35:55:7f:e1:bd:
0f:04:59:60:37:d3:b8:e5:a6:5a:91:53:7d:ba:11:6c:24:5b:
73:88:ec:a5:0c:30:76:db:b7:b3:1e:b8:61:cb:ff:0e:18:84:
89:4e:0d:fd:eb:91:b0:4b:ed:74:5f:83:13:af:25:37:a0:ee:
78:d1:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:38 2025 by rpki-client